How To Repair Symantec Endpoint Protection 12 Live Update Not Working Tutorial

Home > Endpoint Protection > Symantec Endpoint Protection 12 Live Update Not Working

Symantec Endpoint Protection 12 Live Update Not Working

Contents

Solution There are two possible workarounds to this issue: Reconfigure the SEPM so it does not use Windows Authentication when authenticating to the proxy. Select Daily and pick the hour and minute to run the task Click Enabled > OK Note: If you wish LiveUpdate to run multiple times per day, create additional triggers for Education Services Maximize your product competency and validate technical knowledge to gain the most benefit from your IT investments. Create a SymAccount now!' Endpoint Protection Solve the most common LiveUpdate problems that affect Symantec Endpoint Protection. http://xstackwiki.com/endpoint-protection/symantec-endpoint-protection-live-update-not-working.html

This behavior of UACis by design and cannot be bypassed with currently existing Windows APIs. In order to Windows authentication to work properly, the LUALL.exeand LuCallbackProxy.exe executables are launched as the Windows user which was specified when proxy authentication was configured. We will then proceed to re-register the content again with LiveUpdate Note: If the SEPM is installed to a custom location, adjust the path in the command to the location of Configure a scheduled task in Windows to run LUALL.EXE with the -S switch.

Symantec Endpoint Protection Live Update Not Working

Submit a False Positive Report a suspected erroneous detection (false positive). Error This is an example of the complete error from Log.LiveUpdate: 1/9/2013, 18:39:19 GMT -> Progress Update: PATCH_START: Patch File: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Updt221\1357743292jtun_irev130109007.7z", Script File: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Updt221\IrvSP12i.dis" 1/9/2013, 18:39:19 GMT -> Progress Update: SECURITY_PACKAGE_TRUSTED: Translated Content This is machine translated content Login to Subscribe Please login to set up your subscription. Solution Several important steps are illustrated in the short videos Troubleshooting Out-of-date Definitions on Clients (Part 1) and Troubleshooting Out-of-date Definitions on Clients (Part 2) on SymantecTV How to check

Try these resources. Copy command of the DIS script fails (major error): 7/16/2014, 3:59:52 GMT -> LiveUpdate couldn't expand replacement path SesmSyKnCalupdateDir-lumetadata. 7/16/2014, 3:59:52 GMT -> Progress Update: PATCH_ERROR: Patch File: "C:\ProgramData\Symantec\LiveUpdate\Downloads\Updt322\1175809807jtun_lum_the_cal70405005.zip.full.zip", Script File: References: How to update definitions for Symantec Endpoint Protection Manager (SEPM) using a .jdb file Legacy ID 2008091613592648 Terms of use for this information are found in Legal Notices. Symantec Endpoint Protection Manager Liveupdate Information for: Enterprise Small Business Consumer (Norton) Partners Our Offerings: Products Products A-Z Services Solutions Connect with us: Support Connect Communities Security Center Find a Partner Events Webcasts Contact Us About

Don't have a SymAccount? This is recommended for most environments. Answer: Virus Definitions & Security Updates (http://www.symantec.com/security_response/definitions.jsp Question: Where can you drop a JDB onto Symantec Endpoint Protection Manager? https://support.symantec.com/en_US/article.TECH105924.html Click Start > Run Enter the following command including the quotes:"C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\bin\LuCatalog.exe" -cleanup This command will unregister all Symantec Endpoint Protection Manager content from LiveUpdate.

Click OK Terms of use for this information are found in Legal Notices. System Center Endpoint Protection Not Updating Definitions and enter the name of the Windows user which can authenticate through the proxy Click OK Select Run whether is logged on or not Checkmark Run with highest privileges Click Actions Thank you for your feedback! Create a SymAccount now!' LiveUpdate fails on the Symantec Endpoint Protection Manager with errors in Log.LiveUpdate similar to "LiveUpdate couldn't expand replacement path [spcIronWl-incr-InstallDir]." TECH201511 January 22nd, 2015 http://www.symantec.com/docs/TECH201511 Support /

Symantec Endpoint Protection 12.1 Not Updating Virus Definitions

Translated Content This is machine translated content Login to Subscribe Please login to set up your subscription. Common issues found in SesmLu.log: Issue 1: Missing Hub Content ERROR sesmVirDef32 MicroDefs25DefUtilsContentHandler: DU_E_APPLY_PATCH at .\MicroDefs25DefUtilsContentHandler.cpp[284] ERROR sesmVirDef64 MicroDefs25DefUtilsContentHandler: DU_E_APPLY_PATCH at .\MicroDefs25DefUtilsContentHandler.cpp[284] Issue 2: SesmLu is unable to connect to Symantec Endpoint Protection Live Update Not Working Answer: Symantec Endpoint Protection Manager polls this directory several times per minute. Symantec Live Update Not Working Close Login Didn't find the article you were looking for?

Windows LiveUpdate is called by the Symantec Endpoint Protection Manager and is responsible for downloading new content from a LiveUpdate server. his comment is here Reconfiguring the Source for LiveUpdate Content Log into the Symantec Endpoint Protection Manager console Click the Admin button on the left margin Click the Servers button and then click the Local Log.LiveUpdate Default Location: C:\ProgramData\Symantec\LiveUpdate\Log.LiveUpdate Purpose: This is the log for Windows LiveUpdate. Don't have a SymAccount? Symantec Endpoint Protection 12 Not Updating Virus Definitions On Client

If the SEPM does not have internet access, then it is also possible to configure the SEPM to connect to a LiveUpdate Administrator server to download content updates.If you have set Symantec Endpoint Protection Manager's LiveUpdate Configuration blocks this Product Version Language (PVL) from downloading: 07/16 12:14:20 INFO(Medium) sesmAvClient32zh_hant SesmLu: sesmAvClient32zh_hant ({F1B08E6F-DFC6-42b1-8BB4-93F963864288}) blocked by configuration. Troubleshoot Communication issue: Make sure that you are able to browse to the web sites below: Liveupdate.symantecliveupdate.com Liveupdate.symantec.com Symantec.com Make sure that the perimeter firewall has exceptions for the web sites http://xstackwiki.com/endpoint-protection/symantec-endpoint-protection-client-live-update-not-working.html This requires that the SEPM have internet access.

Answer: The JDB will disappear from the incoming folder. Symantec Endpoint Protection Live Update Failed One or more of these files may be out of date, potentially resulting in partial or incorrect LiveUpdate downloads. Submit a False Positive Report a suspected erroneous detection (false positive).

Log.LiveUpdate shows errors similar to "LiveUpdate couldn't expand replacement path [spcIronWl-incr-InstallDir]." The SEPM has been configured to authenticate to a proxy using Windows Authentication and the SEPM can successfully update definitions

Question: How do I know the Symantec Endpoint Protection Manager has processed the JDB file? How to determine the server that LiveUpdate is attempting to connect to: 7/16/2014, 20:50:42 GMT -> Progress Update: DOWNLOAD_FILE_START: URL: "http://liveupdate.symantecliveupdate.com/liveupdate_3.3.100.15_english_livetri.zip", Estimated Size: 0, Destination Folder: "C:\ProgramData\Symantec\LiveUpdate\Downloads" How to tell Education Services Maximize your product competency and validate technical knowledge to gain the most benefit from your IT investments. Symantec Endpoint Protection Live Update Locked By Administrator Disabling Windows Authentication for Proxy Authentication Login to the SEPM Click Admin > Servers Right-click the SEPM server (in the top-left) and click Edit the server properties Click Proxy Server Uncheck

Re-registering/Resetting Symantec Endpoint Protection Manager content with LiveUpdate The following steps should only be performed if troubleshooting steps indicate that the problem is due to Symantec Endpoint Protection Manager content not Try these resources. Supported Products A-Z Get support for your product, with downloads, knowledge base articles, documentation, and more. http://xstackwiki.com/endpoint-protection/symantec-endpoint-protection-updates-not-working.html Provide feedback on this article Request Assistance Print Article Products Subscribe to this Article Manage your Subscriptions Search Again Situation How to troubleshoot failed LiveUpdate or definition update issues.

Supported Products A-Z Get support for your product, with downloads, knowledge base articles, documentation, and more. Create a SymAccount now!' Troubleshoot LiveUpdate and definition issues with Endpoint Protection Manager TECH105924 June 29th, 2015 http://www.symantec.com/docs/TECH105924 Support / Troubleshoot LiveUpdate and definition issues with Endpoint Protection Manager Did this No Yes logo-symantec-dark-source Loading Your Community Experience Symantec Connect You will need to enable Javascript in your browser to access this site. © 2016 Products Products Home Threat Protection Advanced Threat Education Services Maximize your product competency and validate technical knowledge to gain the most benefit from your IT investments.

Click Start > Run Enter the following command including the quotes:"C:\Program Files\Symantec\Symantec Endpoint Protection Manager\bin\LuCatalog.exe" -update JDB Frequently Asked Questions: Question: Where can you get VirusDefs files (VDB/JDB) that you Support / Endpoint Protection / LiveUpdate issues Detect LiveUpdate issues with SymDiag Endpoint Protection Endpoint Protection Manager Troubleshoot LiveUpdate and definition issues with Endpoint Protection Manager Endpoint Protection Manager does not Return code = 4". Close Login Didn't find the article you were looking for?

Thank you for your feedback! Try these resources. The created processes (LUALL.exe and LuCallbackProxy.exe) will both be assigned a Windows security token with limited privileges and permissions (even if the specified user is a member of the Administrators group) SesmLu requests that the Symantec Endpoint Protection Manager publish the current LiveUpdate inventory to disk: 07/16 14:43:18 [1ac0:1b2c] INFO(Med) SesmLu http://127.0.0.1:9090/servlet/ConsoleServlet?ActionType=ConfigServer&action=PublishLuInventory The Symantec Endpoint Protection Manager's response to SesmLu's

Set Action to Start a program Browse to the location of LUALL.EXE (default: C:\Program Files (x86)\Symantec\LiveUpdate\LUALL.exe) In Add Arguments, type: -S Click OK Click Triggers > New... By default, the SEPM runs LiveUpdate every four hours. Several important steps are illustrated in the short videos Troubleshooting Out-of-date Definitions on Clients (Part 1) and Troubleshooting Out-of-date Definitions on Clients (Part 2) on SymantecTV Error Symptoms Virus definitions Cause This issue occurs when the SEPM had been configured to authenticate to a proxy using Windows authentication and when Windows User Account Control is enabled.

Return code = 4" in Endpoint Protection Manager Error: "LiveUpdate start failed with error code -536805375" Error: "LU1835: Connection to the LiveUpdate server failed" Endpoint Protection Clients Troubleshoot LiveUpdate issues with